blog-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local files, creating a potential surface for indirect prompt injection where malicious content in those files could influence the agent's behavior.
- Ingestion points: The skill scans local files with extensions
*.md,*.mdx, and*.html(documented in Step 1 and Step 2.5 of SKILL.md) to gather context and analyze content staleness. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the scanned content are provided.
- Capability inventory: The skill utilizes
WebSearchand generates actionable suggestions for executing other tools such as$blog rewriteand$blog write. - Sanitization: There is no evidence of sanitization or filtering logic applied to the content read from the blog files.
Audit Metadata